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IN THE CLAIMS; 

1 . (Previously presented) A data processing apparatus-implemented method for 
creating a privacy policy, comprising data processing apparatus-implemented steps of: 

creating a policy group; 

moving a data element to the policy group; and 

generating a privacy policy based on the policy group. 

2. (Original) The method of claim 1 , wherein the data element is a predefined data 
element. 

3 . (Original) The method of claim 1 , wherein the data element comprises at least one 
sub-element 

4. (Original) The method of claim 1, further comprising: 
updating a policy-wide property; and 

generating the privacy policy based on the policy-wide property. 

5. (Original) The method of claim 1 , wherein the step of generating a privacy policy 
comprises generating a human-readable version of the policy. 

6. (Original) The method of claim 5, wherein the human-readable version of the 
policy comprises a hypertext markup language version of the policy. 

7. (Original) The method of claim I, wherein the step of generating a privacy policy 
comprises generating an extensible markup language version of the policy. 

8. (Original) The method of claim 1, wherein the step of generating a privacy policy 
comprises generating a compact policy. 
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9. (Original) The method'of claim 1, wherein the step of generating a privacy policy 
comprises generating a policy statement corresponding to the policy group. 

1 0. (Original) The method of claim 9, wherein the step of generating a privacy policy 
further comprises generating a table of policy elements, wherein a policy element in the 
table of policy elements corresponds to the policy statement. 

11. (Original) The method of claim 1 , further comprising: 
identifying an error in the privacy policy; and 
generating an error statement describing the error. 

1 2. (Original) An apparatus for creating a privacy policy, comprising: 
creation means for creating a policy group; 

movement means for moving a data element to the policy group; and 
generation means for generating a privacy policy based on the policy group. 

1 3. (Original) The apparatus of claim 12, wherein the data element is a predefined 
data element. 

14. (Original) The apparatus of claim 12, wherein the data element comprises at least 
one sub-element. 

1 5. (Original) The apparatus of claim 12, further comprising; 
means for updating a policy-wide property, and 

means for generating the privacy policy based on the policy-wide property. 

16. (Original) The apparatus of claim 12, wherein the generation means comprises 
means for generating a human-readable version of the policy. 

17. (Original) The apparatus of claim 16, wherein the human-readable version of the 
policy comprises a hypertext markup language version of the policy. 
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1 8. (Original) The apparatus of claim 19, wherein the generation means comprises 
means for generating an extensible markup language version of the policy. 

1 9. (Original) The apparatus of claim 12, wherein the generation means comprises 
means for generating a compact policy. 

20. (Original) The apparatus of claim 12, wherein the generation means comprises 
means for generating a policy statement corresponding to the policy group. 

2 1 . (Original) The apparatus of claim 20, wherein the generation means further 
comprises means for generating a table of policy elements, wherein a policy element in 
the table of policy elements corresponds to the policy statement. 

22. (Original) The apparatus of claim 12, further comprising: 
means for identifying an error in the privacy policy; and 
means for generating an error statement describing the error. 

23. (Original) An interface for creating a privacy policy, comprising: 
a first portion for displaying predefined data elements; 

a second portion for displaying groups of data elements, wherein a group of data 
elements shares at least one common property; and 

a third portion for displaying a privacy policy generated from the groups of data 
elements. 

24. (Original) A computer program product, in a computer readable medium, for 
creating a privacy policy, comprising: 

instructions for creating a policy group; 

instructions for moving a data element to the policy group; and 
instructions for generating a privacy policy based on the policy group. 
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